What is GHSA-p5xc-69mw-v3hr?

GHSA-p5xc-69mw-v3hr is a security advisory published by GitHub Security Advisories with High severity. A improper neutralization of special elements used in a template engine vulnerability in Fortinet...

Which CVE IDs does GHSA-p5xc-69mw-v3hr cover?

GHSA-p5xc-69mw-v3hr covers the following CVE IDs: CVE-2026-126180. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-p5xc-69mw-v3hr?

GHSA-p5xc-69mw-v3hr has a CVSS v3 base score of 8.4, published by GitHub Security Advisories.

GHSA-p5xc-69mw-v3hrHighCVSS 8.4

A improper neutralization of special elements used in a template engine vulnerability in Fortinet...

Vendor

GitHub Security Advisories

Published

November 12, 2026

Last Modified

November 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-126180 →

📋 Description

A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2 all versions, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2 all versions may allow a low privileged Device Manager admin to obtain super admin privilege on managed FortiGates via injecting malicious commands.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-126180
https://fortiguard.fortinet.com/psirt/FG-IR-26-225
https://github.com/advisories/GHSA-p5xc-69mw-v3hr